Assessment Objective

Determine if:

• AU-11(01) [Assignment: measures] are employed to ensure that long-term audit records generated by the system can be retrieved.

Assessment Methods

Examine

• Audit and accountability policy
• system security plan
• privacy plan
• audit record retention policy and procedures
• system design documentation
• system configuration settings and associated documentation
• audit record archives
• audit logs
• audit records
• other relevant documents or records

Interview

• Organizational personnel with audit record retention responsibilities
• organizational personnel with information security and privacy responsibilities
• system/network administrators

Test

• Mechanisms implementing audit record retention capability

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final